$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft File: 9NCKHhy8kJJU6ea5yTn9haJoseE.mft (raw, json) Hash identifier: wP2LwnYYCVnZqQh0FMExGf3oyUz6dku3kgOLPuDwTMw= Subject key identifier: DE:C7:56:48:E2:3D:30:F3:DA:0D:20:96:18:0B:94:31:7F:01:34:11 Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Certificate serial: 019F905A59A936713AD671488B3D93C45298 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft Manifest number: 16CB Signing time: Thu 23 Jul 2026 19:01:08 +0000 Manifest this update: Thu 23 Jul 2026 19:01:08 +0000 Manifest next update: Fri 24 Jul 2026 19:01:08 +0000 Files and hashes: 1: 1uEYEr4aUEIS5erchF-G3_love8.roa (hash: zNpv/vmV75AmB5KpVV8l8ngcfpgQVlAN2sGn4iX8/ng=) 2: 3w7QKsP-nBdjzBOchAjI61TTv2M.roa (hash: QyB/DzhD3cYZvTNAg8B4G4w4oEF1E2vw8LoHS76oVRY=) 3: 92brh40WW-h_KiNRuqIZRb5unjw.roa (hash: IJpD/Hxzhb2xZ5MqLyCbtsawZPipjgj8kAZiuASmDs4=) 4: 9NCKHhy8kJJU6ea5yTn9haJoseE.crl (hash: I9L5oHWi37zQJ73CI17OTyYKNSrCL6JIak+bzCra3wk=) 5: E33BupXnwP12_IF4jZwLlg0xD4w.roa (hash: 0NACigb3EWqFP6STcn//yzpEwV+siLe8SJdsoWQ96Y8=) 6: GEIKFkgfp6_eIqRvCuYJD-vtDrg.roa (hash: lwzwGD8UECsEevl2wRnqOwDSfVvfj8CLyePijoTaj1Q=) 7: HW_hkEfvkCc_Nbd1XrvVgG6W_mc.roa (hash: hJtEY+ViaHHrE6ovlwWbn8ahLz2qGrhOtEFfqEUoIIE=) 8: I0x4Z-Xx3L5jydy9aoZ7XgF5QNg.roa (hash: JlSlaBzAXyXquY82elhNPJ3+qyBoK5BR21f4eeFhqKI=) 9: IPeiMehm6QECFC52RY0apIXHDNU.roa (hash: 8ANVC/sDEWhLrwoJ9ZsQK2bdvdAuXXAuDwW/JPfEUMw=) 10: OY7VggLlS6S8taEQZwxA_9MJ9Jc.roa (hash: hj2ioa7d+yEki0gbVFILdu22LUXQHhfHdLKTOV3RU+k=) 11: W-LFdXJpQLdmO9rIYC8JOFXBGas.roa (hash: iUdq2UMzKZOkLskYtT6LwMXoPeIpp0LviydmXs6dcHA=) 12: hkJU0HHWf1-4JqWwATl5ZFWfJyc.roa (hash: VDA82OVX/X2yLRwyOfMgqYUT2szuVZcwdV7SJXAxuuQ=) 13: lTN9WM_3kAIwHlpaUspavss4Il0.roa (hash: HHix3BfeZ1Pqtr5dBucc6Su9pPLjQX4ABrsZY3uNeNA=) 14: nM0fT2qGFIY-E7YXz-VIDNKzo6g.roa (hash: 6H3JuqjFe5vPc22lKrJFxNe7X2kqJ2+u4oq5uX5FAp4=) 15: ppxL-JyBnLIGugzsw08md5QRsxg.roa (hash: +phpwkg3kcNrCj/VJvMVw3i6In/xr7LehwojIFYPMKg=) 16: r3qIFL64zBjpZJnS493yx0oryZk.roa (hash: 8MocfFSSFr7GFC7FeOm+9FTF4c9hg7BslJ3kzykAfTs=) 17: tJlaTHgStBVLlJKHBUxS_V9A-YY.roa (hash: ezIOIeTnDODny04gsbWcse31DfWyx6mg8AHZtHJ4iMk=) 18: wyfjlnYky-rnBOXT5ZHjb0J-F9I.roa (hash: XfYB9CaI2N46qtcZ6v9uIjhl1/e0d3UrGQvPezeGBLw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 19:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:5a:59:a9:36:71:3a:d6:71:48:8b:3d:93:c4:52:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Validity Not Before: Jul 23 19:01:08 2026 GMT Not After : Jul 24 19:01:08 2026 GMT Subject: CN=dec75648e23d30f3da0d2096180b94317f013411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:14:1e:91:20:5b:e2:e7:8c:32:98:55:19:99: b8:63:6f:0f:13:2d:8e:25:36:55:76:31:ef:80:d2: 46:93:5f:f4:e3:05:48:57:77:31:d0:41:e3:f2:6d: 28:d3:a5:95:c5:09:ee:32:21:1e:43:99:39:bb:16: b6:ed:9c:43:b6:5d:36:f8:e0:41:77:4f:1d:45:fd: 0f:d7:91:b1:fc:0c:79:5a:d9:a3:50:2f:c8:a0:ee: 65:2e:1e:f7:31:39:e7:78:c7:38:8e:27:c0:85:a6: b6:c7:87:73:92:ee:25:81:78:f1:2c:90:49:4f:c0: cc:0f:15:df:4a:18:ff:01:62:c9:ba:24:0d:d6:ce: 3d:cd:45:93:7c:db:df:ec:4f:7a:98:cd:a2:d2:66: c4:49:82:69:07:32:81:b9:27:3a:c3:c2:e4:7e:65: 3a:6d:ea:fb:b1:1c:da:c9:eb:1a:85:2c:51:c5:9c: 3b:e0:53:25:9c:b6:32:68:91:dd:a4:5c:4a:ce:87: 5a:8f:47:60:6b:0b:76:cf:55:d2:79:f4:d0:75:68: 70:23:70:28:7e:6a:5d:9d:68:32:a0:f3:37:0f:6f: 60:6f:6f:86:77:95:b6:92:2b:a9:07:52:ee:e9:84: d2:3f:d2:37:aa:14:fb:02:86:62:b2:22:0f:b6:02: 69:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:C7:56:48:E2:3D:30:F3:DA:0D:20:96:18:0B:94:31:7F:01:34:11 X509v3 Authority Key Identifier: keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:83:ef:d4:1d:fc:54:05:98:90:64:38:0e:71:c0:65:18:fb: ce:17:85:56:e0:c2:62:7a:f3:6f:6e:e6:e2:2c:cc:a6:c3:4d: 71:e8:66:f9:03:39:61:d0:94:78:bb:d8:e9:97:e7:b4:d2:53: 6b:72:0d:1f:76:34:eb:10:dd:b2:8d:01:7c:57:27:7c:b7:56: 8d:54:7b:36:1e:72:43:12:a3:7a:76:a7:5d:e9:ea:2a:85:41: 32:cf:20:13:92:11:4a:12:4c:45:8a:69:e8:ac:70:ca:8d:30: 5b:b9:10:49:e0:8f:e4:aa:96:08:ec:ce:82:44:3c:7c:58:17: 82:86:e2:93:5f:23:0e:2a:04:1c:04:d7:3e:ae:ce:eb:24:51: 94:15:37:51:23:b2:e1:b0:aa:cf:95:6b:a2:eb:be:36:0e:28: 94:60:64:ba:8e:35:ca:c9:71:c9:f7:6e:c5:6b:f1:9c:cf:cc: ff:1e:85:23:57:8e:99:22:70:f5:b1:98:52:18:77:d7:76:d4: 43:48:83:7d:b7:a0:01:37:a8:4a:2b:03:77:50:45:b4:ae:c3: c8:d0:25:ae:0e:d8:12:04:17:fa:59:ca:55:42:a2:91:1e:e0: f8:e1:4e:78:b2:9f:95:45:fa:19:d1:58:9e:a0:54:70:ad:de: d3:fe:3a:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+QWlmpNnE61nFIiz2TxFKYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZDA4YTFlMWNiYzkwOTI1NGU5ZTZiOWM5MzlmZDg1YTI2 OGIxZTEwHhcNMjYwNzIzMTkwMTA4WhcNMjYwNzI0MTkwMTA4WjAzMTEwLwYDVQQD EyhkZWM3NTY0OGUyM2QzMGYzZGEwZDIwOTYxODBiOTQzMTdmMDEzNDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBQekSBb4ueMMphVGZm4Y28PEy2O JTZVdjHvgNJGk1/04wVIV3cx0EHj8m0o06WVxQnuMiEeQ5k5uxa27ZxDtl02+OBB d08dRf0P15Gx/Ax5WtmjUC/IoO5lLh73MTnneMc4jifAhaa2x4dzku4lgXjxLJBJ T8DMDxXfShj/AWLJuiQN1s49zUWTfNvf7E96mM2i0mbESYJpBzKBuSc6w8LkfmU6 ber7sRzayesahSxRxZw74FMlnLYyaJHdpFxKzodaj0dgawt2z1XSefTQdWhwI3Ao fmpdnWgyoPM3D29gb2+Gd5W2kiupB1Lu6YTSP9I3qhT7AoZisiIPtgJp9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN7HVkjiPTDz2g0glhgLlDF/ATQRMB8GA1UdIwQY MBaAFPTQih4cvJCSVOnmuck5/YWiaLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2Ut ZGNlOTQ3ZTI5NGI2LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2UtZGNlOTQ3ZTI5NGI2 LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMIPv1B38 VAWYkGQ4DnHAZRj7zheFVuDCYnrzb27m4izMpsNNcehm+QM5YdCUeLvY6ZfntNJT a3INH3Y06xDdso0BfFcnfLdWjVR7Nh5yQxKjenanXenqKoVBMs8gE5IRShJMRYpp 6Kxwyo0wW7kQSeCP5KqWCOzOgkQ8fFgXgobik18jDioEHATXPq7O6yRRlBU3USOy 4bCqz5Vrouu+Ng4olGBkuo41yslxyfduxWvxnM/M/x6FI1eOmSJw9bGYUhh313bU Q0iDfbegATeoSisDd1BFtK7DyNAlrg7YEgQX+lnKVUKikR7g+OFOeLKflUX6GdFY nqBUcK3e0/46fg== -----END CERTIFICATE-----Generated at Fri Jul 24 04:24:04 2026 by rpki-client